Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
File:                     Qd15VXJVQZ63_cbQrzH6cH_fusg.mft (raw, json)
Hash identifier:          ts5PgXsz9ABR8sjCVKOxcs8Anu/R27a9FKu5x6RpeMw=
Subject key identifier:   B9:8B:1F:89:D5:E5:A4:D8:CF:6E:B0:93:96:AE:37:90:13:45:48:8A
Authority key identifier: 41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8
Certificate issuer:       /CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
Certificate serial:       01962E61B5B87B379F5D7B0DFC8E9DC0AFD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft
Manifest number:          E5
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: 9GDBOU9_J7es0wo35klUOn0T51U.roa (hash: cMQbqhsLcUBPEgQ9vc2CK4bGp5osIlpssNdk9BGiNMw=)
                          2: Qd15VXJVQZ63_cbQrzH6cH_fusg.crl (hash: gxJmS6k6+/8+604GbWnuht/kGTd0tfvKi06AXGWnC/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b5:b8:7b:37:9f:5d:7b:0d:fc:8e:9d:c0:af:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dd79557255419eb7fdc6d0af31fa707fdfbac8
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=b98b1f89d5e5a4d8cf6eb09396ae37901345488a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:61:cb:3a:e5:12:02:a9:f2:b7:e0:30:28:ae:
                    06:fd:ea:cd:91:1c:5b:8f:3f:0d:f5:d1:5a:15:cb:
                    02:f2:f9:6c:de:7c:d7:b2:16:54:a1:87:b9:7b:b1:
                    e3:74:0b:28:ad:76:e6:96:bf:bc:fd:55:a3:66:42:
                    6f:84:5c:91:a3:20:d4:36:0f:c7:b4:d0:b2:4a:48:
                    c7:73:b0:98:c7:f1:9b:01:28:fa:73:eb:dd:50:7e:
                    4b:88:e7:8a:f9:97:d3:95:ab:a3:0a:af:89:c6:43:
                    1f:60:c2:9f:72:00:e3:f1:0d:d2:2c:7e:dd:e1:03:
                    c0:8a:88:6d:f3:35:63:d9:4a:16:a9:17:31:23:72:
                    9e:6d:e6:9c:91:11:d3:bb:fb:95:68:15:f9:b1:b3:
                    9f:19:a8:a0:a8:23:15:99:38:01:87:7f:8e:22:78:
                    c4:d3:9b:54:d5:a5:cd:0a:e1:07:3b:42:e2:74:bc:
                    13:bc:43:ca:af:08:a7:19:ab:3a:10:a0:53:cb:64:
                    27:5e:f5:39:81:37:9a:64:ab:9e:59:e6:aa:8c:5c:
                    be:9a:3f:56:8f:9d:38:08:e3:d8:18:00:e9:d1:3b:
                    eb:16:1c:2b:06:a2:87:87:74:3d:5d:35:d1:f5:3e:
                    7e:73:b8:c0:76:46:74:2d:ce:16:d7:47:a7:fb:c5:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8B:1F:89:D5:E5:A4:D8:CF:6E:B0:93:96:AE:37:90:13:45:48:8A
            X509v3 Authority Key Identifier:
                keyid:41:DD:79:55:72:55:41:9E:B7:FD:C6:D0:AF:31:FA:70:7F:DF:BA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd15VXJVQZ63_cbQrzH6cH_fusg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1c762-5b4e-4212-9ad8-d0c55b0d4639/1/Qd15VXJVQZ63_cbQrzH6cH_fusg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:8c:97:88:cf:30:d3:3e:e7:59:97:02:db:ef:ce:1b:20:30:
         09:9b:31:77:13:d0:2c:67:eb:7f:e5:3a:79:9f:ca:84:73:96:
         83:79:ba:41:11:ea:74:01:fe:28:f7:5f:66:c7:c6:24:c0:50:
         63:f6:c7:ea:ae:e1:85:e9:8e:94:bf:48:ea:b8:b4:c8:4f:cd:
         fa:e7:fb:53:72:b8:59:ae:55:5d:55:15:e9:d1:7b:b7:b9:cc:
         ce:ff:49:ba:88:b2:e9:50:c1:51:3d:b8:e6:73:ed:ed:90:40:
         f6:58:9d:b5:f9:47:5b:2e:cd:6a:86:23:0e:b2:ef:d1:cd:fd:
         9f:39:e3:f4:bf:06:64:f5:ec:75:0a:4e:f1:d3:73:ed:24:d9:
         94:14:59:1d:35:cd:fe:94:1d:ec:34:fa:f4:24:21:05:96:68:
         e6:5c:7e:e2:28:54:13:8a:6f:ee:b9:d8:84:05:3d:ba:8c:6b:
         6b:e4:20:6c:07:81:fa:cf:4c:7d:be:34:3f:b7:06:c5:1f:c0:
         3b:3d:68:94:7b:31:02:91:37:b8:5f:63:22:aa:65:cb:1a:62:
         ee:f0:91:9e:b0:08:17:2d:e8:42:eb:3c:9c:43:86:18:be:fd:
         80:38:37:39:5b:f9:66:19:92:1d:89:a3:03:be:b9:11:b5:1e:
         d7:d1:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----